How to Build AWS Multi-Account Infrastructure with Security and Speed
Episode description
Cloud Security Podcast - This month we are talking about "Building on the AWS Cloud" and next up on this series, we spoke to Patrick Sanders (Patrick's Linkedin) & Jospeh Kjar (Joseph's Linkedin), Snr Cloud Security Engineer at Netflix on what does it take to reimagine multi-account deployments gave them both security and speed.
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Twitter: Patrick Sanders (Patrick's Linkedin) & Jospeh Kjar (Joseph's Linkedin)
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
Spotify TimeStamp for Interview Questions
(00:00) Introduction
(03:06) snyk.io/csp
(03:41) A bit about how Patrick and Joseph got into the Cloud Space
(06:00) Building blocks of scalable AWS infrastructure
(09:14) Should there be a seperate account for forensics
(12:44) Diff AWS Org for dev and prod?
(13:45) How to ensure dedicated IR account is secure?
(15:10) 1st step to building a new startup in AWS
(17:39) Should non prod and prod accounts be seperate?
(21:29) How do you ensure visibility into your AWS organisation?
(25:04) Integrate FIM into AWS
(26:29) Layers for a multi account strategy
(28:23) Challenges from going from one account to multi account
(34:03) Bringing identity to the application
(38:25) The importance of IMDS
(42:07) The security benefit of using IMDS
(45:34) Managed identity in AWS
(46:40) Why developer experience is important?
(49:49) What do cloud security engineers do ?
(53:05) Where you can find Joseph and Patrick?
See you at the next episode!